RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/bfvHdnmFr_b5jM3hELmzpyppQYY.cer (download)

Subject key identifier:   6D:FB:C7:76:79:85:AF:F6:F9:8C:CD:E1:10:B9:B3:A7:2A:69:41:86
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/bfvHdnmFr_b5jM3hELmzpyppQYY.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 327700
    1: IP: 41.94.0.0/16
    2: IP: 2c0f:f140::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/bfvHdnmFr_b5jM3hELmzpyppQYY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5512 (0x1588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:19:53 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F364A64DAF/serialNumber=6DFBC7767985AFF6F98CCDE110B9B3A72A694186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:41:21:ad:d0:78:f7:27:29:6b:af:9c:66:
                    b0:40:6f:09:15:36:8c:d5:c7:c5:05:09:43:b9:72:
                    9e:ec:c7:0c:ce:01:b8:aa:e0:8e:e8:c4:54:3e:dd:
                    82:1b:49:d1:cc:63:a6:83:ba:36:0c:f0:df:34:03:
                    90:b7:53:68:49:be:d8:a8:23:8d:c6:a8:67:c4:ac:
                    bd:62:47:3c:c3:d9:d9:5a:3d:f4:9c:02:90:ef:85:
                    d9:d0:c5:ba:55:8f:2a:c2:7b:ff:f8:7f:d8:30:37:
                    88:71:15:6b:5b:89:8c:cd:a2:2b:bb:89:89:1a:56:
                    ed:c9:14:3b:5c:19:48:9d:f7:38:ed:94:66:c5:76:
                    a6:e5:c0:7b:89:0a:38:af:23:fa:e7:8f:72:97:a3:
                    47:cb:c0:81:eb:94:70:c4:6c:6d:c2:64:8b:50:eb:
                    29:44:27:18:35:c9:2d:d4:d9:bc:3e:19:7a:f3:c3:
                    d4:ee:f9:c2:e6:e2:55:1b:44:f5:b0:3e:d4:5c:ac:
                    ad:a9:9c:8e:23:b0:cb:b7:30:81:a9:cb:76:a0:78:
                    0c:cb:63:63:34:91:30:ad:e9:32:dc:fc:b7:6c:c3:
                    ca:a3:5d:39:b7:93:87:96:2f:ec:aa:e1:58:e1:2c:
                    63:26:0c:ac:d6:84:3b:eb:f3:47:62:7e:bb:ee:d4:
                    e0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6D:FB:C7:76:79:85:AF:F6:F9:8C:CD:E1:10:B9:B3:A7:2A:69:41:86
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/bfvHdnmFr_b5jM3hELmzpyppQYY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327700

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.94.0.0/16
                IPv6:
                  2c0f:f140::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:5f:fc:0e:3b:b2:12:28:3b:39:a7:94:1d:27:12:84:19:47:
         3f:64:84:71:70:3f:7f:86:93:28:f9:de:59:c4:c7:81:2d:93:
         73:a5:cd:5b:59:17:50:ca:1e:5b:22:ae:44:5f:ee:8e:f0:b8:
         0d:19:d9:17:02:ae:50:ad:38:f9:ad:f4:41:2c:1f:4e:8c:66:
         ca:81:f8:1e:ad:20:a4:f9:f0:09:2e:67:c7:a9:fd:ad:54:29:
         cf:be:56:8b:2e:a5:a5:65:b1:91:f9:c8:66:de:62:0c:11:cf:
         82:e6:06:0e:12:d7:eb:4c:bf:a7:3e:9c:4d:cb:6c:79:70:6a:
         64:0e:81:b0:5f:e8:00:f0:74:96:bd:b1:4e:47:0d:18:8b:78:
         1e:fc:21:13:e3:6b:49:7c:f2:e1:b4:cc:4e:4f:b0:46:19:ed:
         89:18:5c:25:9c:00:c6:25:c7:f6:a6:27:06:34:86:69:72:e7:
         56:be:36:7f:27:08:bd:98:ff:86:87:cd:d0:b7:43:6e:c1:91:
         29:b0:10:4d:46:20:2e:43:3b:34:df:c2:1a:60:67:e4:e8:1d:
         f4:6d:b8:48:8f:95:34:2e:b2:f6:5c:f2:23:f3:5d:6e:cc:24:
         67:6e:af:68:df:0c:62:b2:1e:20:24:db:8b:8f:ba:a7:60:03:
         35:8b:e8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:22:02 2022 by LibreSSL & rpki-client.